A. Responsible office and Data Protection Officer
Resposible office and contact
Responsible for the processing of the processing operations described in this data protection notice within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR):
E.ON Group Innovation GmbH
Brüsseler Platz 1
D-45131 Essen
info@evailable.ai
Data Protection Officer and contact
E.ON Group Innovation GmbH
Data Protection Officer
Brüsseler Platz 1
D-45131 Essen
info@evailable.ai
B. Website functions
1. Retrieval of the website
About this processing
Your access to this website requires the processing of your personal data, such as your IP address. Further processing of personal data when using special services or cookies is described separately.
Description and purpose of processing
When you access this website, we process your personal data to provide you with this website and to ensure its operation and technical security.
Categories of personal data
Your IP address, browser data (e.g. referrer ID or redirects, screen resolution, operating system, browser and browser version, installed plug-ins and extensions and fonts).
Legal basis of processing
The processing of your personal data when you access this website is based on our legitimate interest (Art. 6 para. 1 lit. f DSGVO).
We have balanced our interest in providing as well as operating and securing this website against your interest in the confidentiality of your personal data, whereby our interest prevails. Without the processing of personal data, the provision of the website is technically impossible. This also applies to its operation and security. The security of the website also serves your interests.
Recipients / categories of recipients
We do not disclose your personal data to recipients.
Storage period
We store your data for as long as is necessary to provide the above services to you.
Obligation to provide
You are not obliged to provide personal data. However, without your personal data, you will not be able to access this website.
2. Technically necessary cookies
About this processing
In connection with the use of technically necessary cookies, we process your personal data in order to provide you with certain functions of this website.
Description and purpose of the processing
When you access this website, your personal data may be processed in connection with the use of so-called “cookies”. Cookies are text files that are stored on your terminal device and are necessary for certain functions of this website. You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website. In this regard, the following information relates to cookies that have no connection to a service available via our website, but serve exclusively to provide the website itself (“technically necessary cookies”).
Categories of personal data
Google Tag Manager: aggregated data about tag triggering Consent Management Platform Usercentrics: opt-in and opt-out data, referrer URL, user agent, user settings, consent ID, time and type of consent, template version, banner language.
Legal basis of processing
The processing of your personal data in connection with the use of technically necessary cookies on this website is based on our legitimate interest (Art. 6 (1) lit. f DSGVO).
We have balanced our interest in providing the functions of this website that depend on cookies against your interest in the confidentiality of your personal data, whereby our interest prevails. Without the processing of personal data, it is technically impossible to provide the functions. At the same time, you have the option described above to prevent the processing of your personal data in connection with cookies.
Recipients / categories of recipients
We do not disclose your personal data to recipients.
Storage period
We store your personal data for as long as is necessary for the use of the respective cookie.
Obligation to provide
You are not obliged to disclose personal data. Without your personal data, not all functions of this website may be available to you.
3. Local storage
About this processing
If you have consented, we store personal data entered by you on our website in the so-called local storage in your browser.
Description and purpose of processing
In connection with the use of local storage, we process your personal data in order to design certain functions of this website. This means that we store information you enter on our website in the local storage beyond your respective visit to our website. In this way, you do not have to re-enter this information on future visits to our website, but are provided with it directly as a suggested entry.
Categories of personal data
Input information in forms and data from tracking tools, but not consent, bank details or contract account numbers.
Legal basis of processing
The processing of your personal data in connection with the use of Local Storage on this website is based on legitimate interest (Art. 6 para. 1 lit. f DSGVO).
Recipients / categories of recipients
We do not disclose your personal data to recipients.
Storage period
We store your personal data for as long as is necessary for the use of the respective function of the website that depends on the Local Storage.
Obligation to provide
You are not obliged to provide personal data. You can configure your browser settings according to your wishes and, for example, deactivate the use of Local Storage. Without your personal data, not all functions of this website may be available to you.
4. Contact form, general e-mail address
About this processing
You can contact us using our contact form on this website or via the general email address info@evailable.ai. For this purpose, we process your personal data.
Description and purpose of the processing
We process your personal data in order to process your respective request.
Categories of personal data
Data that you enter in the contact form.
Legal basis of processing
If your enquiry relates to the performance of a contract to which you are a party or to carry out pre-contractual measures in response to your enquiry, Art. 6 (1) lit. b DSGVO is the legal basis for the processing.
In other cases, the processing of your personal data to handle your request is based on our legitimate interest (Art. 6 para. 1 lit. f DSGVO). We have balanced our interest in providing the contact form or a general service email address against your interest in the confidentiality of your personal data, whereby our interest prevails. Without processing the personal data, it is not possible to process your request. Furthermore, the use of the contact form or a general service e-mail address is voluntary.
Recipients / categories of recipients
We do not disclose your personal data to recipients unless this necessity arises directly from your enquiry.
Storage period
We store your personal data for as long as is necessary to process your respective enquiry or for as long as we are entitled or obliged to store it on the basis of statutory retention obligations.
Obligation to provide
You are not obliged to provide personal data. The fields marked with * in the contact form are mandatory fields. Without this personal data, your respective request cannot be processed. The remaining information is voluntary and can simplify the processing of your enquiry.
5. Newsletter
About this processing
If you subscribe to our newsletter via this website, we will process your personal data.
Description and purpose of the processing
We process your personal data to provide you with our newsletter. The contact channel to choose from is email.
Categories of personal data
Your e-mail address
Legal basis of the processing
The processing of your personal data is based on your consent (Art. 6 para. 1 lit. a DSGVO and §25 TTDSG). You can revoke your consent via the Cookie Settings button.
Recipients / categories of recipients
We disclose your personal data to the following company as a service provider:
AGNITAS AG
Werner-Eckert-Strasse 6
D-81829 Munich
Storage period
We store your data as long as this is necessary for the provision of the newsletter to you.
Obligation to provide
You are not obliged to provide personal data. However, we cannot provide you with our newsletter without your e-mail address.
6. Usercentrics Consent Management Platform
About this processing
We use the Usercentrics Consent Management Platform to manage consents given by you.
Description and purpose of the processing
This service provides a Consent Management Platform to comply with legal record keeping requirements for obtaining consent.
Categories of personal data
Opt-in and opt-out data, referrer URL, user agent, user preferences, consent ID, time of consent, type of consent, template version, banner language.
Legal basis of the processing
The processing is necessary for the fulfilment of a legal obligation to which we are subject (Art. 6 para. 1 lit. c DSGVO).
Insofar as the processing of your personal data is based on your consent, this is the legal basis (Art. 6 para. 1 lit. a DSGVO and §25 TTDSG). You can revoke your consent via the Cookie Settings button.
Recipients / categories of recipients
We use the service provider Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany.
Storage period
The consent data (consent and revocation of consent) is stored for three years. Cookies are deleted after closing the browser. The data is then deleted immediately.
Obligation to provide
You are not obliged to disclose personal data.
C. Analysis of website behaviour
Google Tag Manager
Google Tag Manager
Description of Service
Google Tag Manager is a Google solution that allows companies to manage website tags from a single interface. The Google Tag Manager is a cookieless domain that does not collect any personal data. Google Tag Manager is responsible for triggering other tags, which in turn may collect data. We hereby draw your attention to this separately. Google Tag Manager does not access this data.
Processing company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Purposes
This list represents the purposes of the data collection and processing.
- Functionality
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
- Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Aggregated data about tag firing
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. f GDPR
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted after fulfillment of the respective purposes.
Data Recipients
In the following the recipients of the data collected are listed.
- Alphabet Inc.
- Google LLC
- Google Ireland Limited
Google Analytics and Optimize
Google Analytics
Description of Service
We use the web analysis service Google Analytics to collect usage data from our websites. This enables us to compile reports on website activity and thus to improve the website.
Furthermore, we use Google Analytics to process additional information from users, provided they are registered with Google and have consented to the processing of their data for personalized advertising. In these cases, the usage activities on our website are assigned to the Google account, possibly including location, search history and YouTube history. If applicable, cross device tracking might also take place. We receive so-called insights, i.e. aggregated demographic information about our website visitors.
We also process the data collected by Google Analytics for (re-) marketing purposes and transmit corresponding lists (so-called audiences) to other companies in the E.ON Group, as well as to Google and its advertising network. Last but not least, we also use Google Analytics to measure the success of our advertising campaigns and to be able to optimize them through Google conversion tracking. Cross-domain tracking within the E.ON Group may also be used to measure the success of advertising measures that cover the websites of several companies in the E.ON Group.
We also use the data collected by Google Analytics in the Google Optimize tool. This is done to improve usability through the use of A/B tests and to personalize the website. Google Optimize allows you to test different versions of a website and how the user reacts to those different versions. For example, we can test where certain information is most attractive on the website.
In addition, we share anonymized data from Google Analytics with Google for benchmarking purposes.
Processing company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
- Marketing
- Analytics
- Remarketing
- Benchmarking
- Advertising
- Website optimization
- A/B Testing
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
- Cookies
- Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- App updates
- Click path
- Date and time of visit
- Device information
- Downloads
- Flash version
- Location information
- IP address
- JavaScript support
- Pages visited
- Purchase activity
- Referrer URL
- Usage data
- Widget interactions
- Browser information
- Cookie IDs
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR and § 25 TTDSG
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data collected with Google Analytics is stored for a period of 50 months. The data collected with the additional Google Optimize Cookie will be stored for the duration of the experiment, usually 90 days.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
- Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
- Google Ireland Limited, Alphabet Inc., Google LLC
Click here to read the privacy policy of the data processor
https://policies.google.com/privacy
Storage Information
Maximum age of cookie storage: 2 years
Stored Information
- Name: _ga; This is used to distinguish users.; Type: cookie; Duration: 2 years;
- Name: _gid; This is used to distinguish users.; Type: cookie; Duration: 1 day;
- Name: _gat ; This is used to throttle request rate.; Type: cookie; Duration: 1 minute;
- Name: _dc_gtm_xxx; This is used to distinguish users.; Type: cookie; Duration: 1 minute;
- Name: _gat_gtag_xxx; This is used to distinguish users.; Type: cookie; Duration: 1 minute;
- Name: _gac_xx; This contains information about which ad was clicked.; Type: cookie; Duration: 2 months, 29 days;
- Name: IDE; Through this ID, Google can recognize the user across different websites and domains and display personalized advertising.; Type: cookie; Duration: 1 year;
LinkedIn Analytics
Description of Service
This is an analysis and conversion tracking service. It measures how many website visitors were redirected to the website by clicking on advertisements. This is used to measure the effectiveness and to improve and optimize advertising campaigns.
Processing company
LinkedIn Ireland Unlimited Company
Wilton Place, Dublin 2, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://www.linkedin.com/help/linkedin/ask/TSO-DPO
Data Purposes
This list represents the purposes of the data collection and processing.
- Analytics
- Conversion Tracking
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
- Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Add-ons information
- Browser information
- Device identifiers
- IP address
- ISP/Connection speed
- Operating system information
- Referrer URL
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR, § 25 Abs. 1 TTDSG
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
- Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
- LinkedIn Ireland Unlimited Company
- LinkedIn Inc.
Click here to read the privacy policy of the data processor
https://www.linkedin.com/legal/privacy-policy
Storage Information
- Non-cookie storage: yes
Stored Information
- Name: lms_analytics; Used to identify LinkedIn Members in the Designated Countries for analytics.; Type: cookie; Duration: 30 days;
- Name: AnalyticsSyncHistory; Used to store information about the time a sync took place with the lms_analytics cookie; Type: cookie; Duration: 30 days; Domain: linkedin.com;
- Name: queryString; Used to persist marketing tracking parameters ; Type: cookie; Duration: 30 days;
- Name: SID; Used to determine what a visitor is doing before they convert on a LinkedIn microsite; Type: cookie; Duration: Session; Domain: linkedin.com;
- Name: VID; ID associated with a visitor to a LinkedIn microsite which is used to determine conversions for lead gen purpose; Type: cookie; Duration: 1 year; Domain: linkedin.com;
- Name: s_plt; Tracks the time that the previous page took to load ; Type: cookie; Duration: Session; Domain: linkedin.com;
Contentsquare
ContentSquare
Description of Service
This web analysis service is used to improve the user-friendliness of the website, to increase user satisfaction and thus ultimately to improve the conversion rates. For this purpose, data on the interaction of users with the website are collected and analyzed. This information about a specific website visit is only recorded anonymously. Therefore, we cannot assign this information to a specific user or a specific person. The analyzed data can be segmented, among other things, according to marketing campaigns through which the users were directed to the website. On the basis of the analyzed data, improvement measures are derived, partly using methods of artificial intelligence.
Processing company
Contentsquare GmbH
Implerstraße 25a, 81371 München
Data Purposes
This list represents the purposes of the data collection and processing.
- Analytics
- Increase user satisfaction
- Improve conversion rates
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
- Cookies
- Scripts
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Date and time of visit
- Duration of visit
- Geographic location
- Operating system information
- Purchase activity
- Referrer URL
- Screen resolution
- Unique device identifier
- Usage data
- Websites visited
- Hashed IP Address
- Mouse movements
- Screen taps
- Scrolling activity
- Interaction with forms
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR, § 25 Abs. 1 TTDSG
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes. Aggregated web analysis data is usually deleted after 13 months, session recordings of mouse movements after 60 days.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
- Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
- Contentsquare GmbH
Click here to read the privacy policy of the data processor
https://contentsquare.com/privacy-and-security/
Click here to read the cookie policy of the data processor
Storage Information
- Maximum age of cookie storage: 1 year, 1 month
Stored Information
- Name: _CS_ID; Contains the following data separated by dots: user ID, user creation timestamp, number of visits, last pageview timestamp, last visit timestamp, timestamp of the last time this visitor was drawn, cookie expiration date, cookie SameSite attribute, cookie Secure attribute value (0/1).; Type: cookie; Duration: 1 year, 1 month;
- Name: _CS_S; Contains the number of pages viewed in the current session and the recording type: “.1” (not recorded for Session Replay), “.3” (to include a visitor for Session Replay recording service) or “.5” (to include a visitor for Session Replay recording service after a specific trigger). For Advanced recording pipeline: value is 0 when not recorded for Session Replay/ Value is .5 when recorded.; Type: cookie; Duration: 30 minutes;
- Name: _CS_CVARS; Includes the session’s Custom variables URL encoded.; Type: cookie; Duration: Session;
- Name: _CS_EX; When set, the user is excluded from tracking. Contains the timestamp of the last time this visitor was drawn.; Type: cookie; Duration: 30 minutes;
- Name: _CS_C; Contains the user consent state (not expressed, granted, withdrawn).; Type: cookie; Duration: 1 year, 1 month;
- Name: _CS_OPTOUT; When set, the user is opted-out from tracking.; Type: cookie; Duration: 1 year, 1 month;
- Name: _CS_MK; This cookie is used for the Google Analytics and Adobe Analytics integrations.; Type: cookie; Duration: 30 minutes;
- Name: _CS_RL; This cookie is used for a few integrations we have that require us to generate replay links and put them into cookies.; Type: cookie; Duration: 1 year;
- Name: _CS_T; This is used to check if the browser supports cookies and if the tag must set the SameSite flag to None and the Secure flag to Yes.; Type: cookie; Duration: Session;
- Name: _CS_SAME_SITE; This is used to check if the browser supports the SameSite flag.; Type: cookie; Duration: Session;
- Name: _CS_ROOT_DOMAIN; This is used to get the root domain.; Type: cookie; Duration: Session;
Semasio
Semasio
Description of Service
This is a marketing service. With this service it is possible to understand users and target them.
Processing company
Semasio GmbH
Hermannstrasse 13, 20095 Hamburg, Germany
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
privacy@semasio.com
Data Purposes
This list represents the purposes of the data collection and processing.
- Advertisement
- Marketing
- Optimization
- Targeting
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
- Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- Browser information
- Cookie ID
- Date and time of visit
- Device operating system
- Identifiers and information contained in cookies
- IP address
- Pages visited
- URL
- Usage data
- Legal Basis
- In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. a GDPR
- §25 para. 1 s. 1 TTDSG
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The collected User data will be stored for up to 180 days from the date of collection.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.
- Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
- Semasio GmbH
- Google LLC
- Hotjar
- Hubspot
- Service providers
- Click here to read the privacy policy of the data processor
- https://www.semasio.com/privacy
Storage Information
- Maximum age of cookie storage: 5 months, 27 days
Stored Information
- Name: SEUNCY; This is a marketing cookie. It can be used to profile your interests and show you relevant advertisements on other websites.; Type: cookie; Duration: 5 months, 27 days;
Cloudflare
Cloudflare
Description of Service
This is a service providing increased security and performance for websites. Cloudflare offers for example a content delivery network („CDN“) to improve the loading times of the website. The use of a CDN enables the user to make content available for retrieval more quickly with the help of regionally or internationally distributed servers.
Processing company
Cloudflare Inc.
101 Townsend St., San Francisco, CA 94107, United States of America
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
privacyquestions@cloudflare.com, legal@cloudflare.com
Data Purposes
This list represents the purposes of the data collection and processing.
- Optimization
- Website security
- Improvement of service
- Reducing bandwidth usage
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
- Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
- IP address
- System configuration information
- Name of website
- Date and time of request
- Name and URL of the accessed file
- Amount of data transferred
- Status Information
- Device operating system
- Referrer URL
- Requesting provider
- Device type
- Time of the server request
Legal Basis
In the following the required legal basis for the processing of data is listed.
- Art. 6 para. 1 s. 1 lit. f GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America,European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
In the following the recipients of the data collected are listed.
- Cloudflare Group
Click here to read the privacy policy of the data processor
https://www.cloudflare.com/privacypolicy/
Storage Information
- Maximum age of cookie storage: 1 month
Stored Information
- Name: _cf_bm; This cookie is set by Cloudflare. The cookie is used to support Cloudflare Bot Management.; Type: cookie; Duration: 30 minutes;
- Name: cf_clearance; This cookie is set by Cloudflare-protected websites displaying a Captcha or a managed challenge. This Cookie stores the proof that a challenge has been passed.; Type: cookie; Duration: 30 minutes;
- Name: _cfuvid; This cookie is required to manage inbound traffic and provide better visibility into the origin of a particular request.; Type: cookie; Duration: 7 days;
- Name: cf_chl_cc_XXX; This cookie is used by Cloudflare to define challenges. It is not used for tracking and does not go beyond the scope of the challenge.; Type: cookie; Duration: Session;
- Name: cf_chl_rc_i; This cookie is used by Cloudflare to define challenges. It is not used for tracking and does not go beyond the scope of the challenge.; Type: cookie; Duration: Session;
- Name: cf_chl_rc_ni; This cookie is used by Cloudflare to define challenges. It is not used for tracking and does not go beyond the scope of the challenge.; Type: cookie; Duration: Session;
D. Social Media
Integration of YouTube Videos
About this processing
We process your personal data in order to provide you with videos on the YouTube platform.
Description and purpose of the processing
We have embedded YouTube videos on our website, which are stored on YouTube, a platform of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and can be played directly from our website. The YouTube videos are all embedded in “extended data protection mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only by playing the respective video is the respective processing initiated and data transferred.
Categories of personal data
By playing the video, the following categories of personal data are transmitted to YouTube: Website, language, region, browser type, browser version.
If you have a Google account and / or a YouTube account, further categories of data are processed. For more details, see Google – Privacy Policy YouTube Services.
Legal basis of processing
The processing of your personal data is based on our legitimate interest (Art. 6 para. 1 lit. f DSGVO).
We have weighed our interest in the use of these videos against your interest in the confidentiality of your personal data, whereby our interest prevails. We cannot display corresponding videos without accessing the interface provided for this purpose by YouTube. The processing of personal data is technically mandatory for accessing the interface. In addition, you are free not to play a video and thus prevent the processing.
Recipients / categories of recipients
We disclose your personal data to YouTube.
Storage period
We store your personal data as long as this is necessary for the use of the.
Third country reference of the processing of your personal data.
YouTube processes your personal data in the USA. There is no adequacy decision of the European Commission for the USA. We have secured the level of data protection with appropriate guarantees (so-called standard contractual clauses) within the meaning of Art. 46 DSGVO. You can request a copy of these guarantees from us.
Obligation to provide
You are not obliged to disclose personal data.
Fan pages and social media channels
We maintain corporate appearances (so-called channels or fan pages) on the social media portals Facebook, Twitter, Instagram, YouTube, LinkedIn and TikTok.
By presenting our company in social media portals, we would like to seek active communication with you and offer you the opportunity to inform yourself about the products and services of our company and our group of companies via this way. In addition, we use social media portals to carry out marketing measures including competitions.
If you use the contact options to us on these social media portals, we process the data you provide in order to process your request, which is the reason for your contact, and to answer your questions. Your feedback and reactions in the portals also serve us to further develop and improve our product portfolio.
The operators of some social media portals provide our company with statistical data (so-called “page insights”) that give us information about user activities on our corporate appearances. As part of marketing measures, we use the options provided by the social media portals for addressing specific target groups (“targeting”). In addition, usage data from our corporate appearances and marketing activities is also shared with other E.ON Group companies for the purpose of retargeting activities.
We process your personal data on the basis of our legitimate interest in communicating with you, in continuously optimizing our corporate appearances, and in the implementation of efficient advertising measures. If the processing is necessary for the fulfillment of a contract with you or for the implementation of pre-contractual measures, we process your personal data on this basis.
We store your personal data for as long as this is necessary to process your respective request or for as long as we are entitled or obliged to store it due to legal requirements.
The social media portals are not operated by us, but by the respective social media portal operators on their own responsibility. The product sovereignty and product design of the social media portal lies with the respective social media portal operator. We have no influence on the data collected and processed by the operator, nor are we aware of the full scope of data collection, the purposes of processing or the storage periods. Only in individual cases in which the social media portals process personal data on the basis of our instructions, they act as processors under our responsibility as controllers.
For our Facebook fan page, we have concluded a joint control agreement in accordance with Art. 26 GDPR with Facebook Ireland Ltd. At this, it is agreed (https://www.facebook.com/legal/terms/page_controller_addendum) that Facebook is responsible for providing you with information about the processing of page insights (https://www.facebook.com/legal/terms/information_about_page_insights_data) and enable you to exercise your rights as a data subject according to the GDPR. You can find out more about these rights in your Facebook settings.
We would like to point out that the processing of personal data in countries outside the European Union and the European Economic Area, especially in the USA, cannot be ruled out. Under certain circumstances, this can be associated with the risk of more difficult legal enforcement, which represents a risk for the individual user.
Regarding the collection, processing and use of personal data by the operators of the social media portals, we refer to their privacy policies:
- Facebook (Facebook Ireland Ltd., Irland): https://www.facebook.com/policy and https://www.facebook.com/legal/terms/information_about_page_insights_data
- Instagram (Facebook Ireland Ltd., Irland): https://instagram.com/about/legal/privacy
- Twitter (Twitter International Company, Irland): https://twitter.com/de/privacy
- YouTube (Google Ireland Ltd., Irland): https://policies.google.com/privacy
- LinkedIn (LinkedIn Ireland Unlimited Company): https://www.linkedin.com/legal/privacy-policy
- TikTok (TikTok Technology Ltd., Irland): https://www.tiktok.com/legal/privacy-policy
E. Data Recipients and Data Sources
1. Categories of data recipients
Within the scope allowed by law (as previously described), we relay personal data to companies in our group as well as to external service providers:
- Group companies, for the purpose of fulfilling contractual obligations and for reporting purposes;
- IT service providers, for the purpose of maintaining our IT infrastructure
- Public agencies where justified on a case-by-case basis (e.g. national insurance carriers, financial authorities, police, public prosecutor’s office, regulatory agencies)
2. Data Sources
We process personal data that we obtain from you within the context of our user and business relationships. Where necessary in order to provide our services, we process personal data that we have collected within the context of your use of our website.
3. Data transfer to a third country
In addition to the data transfers to third countries as already described above, data is also transferred to countries outside the European Union and the European Economic Area (“third countries”) in the context of the administration, development and operation of IT systems. When doing so, the following must be observed:
Transfer is in principle permissible because the requirements allowing for such transfer under law have been satisfied or you have given your consent to the transfer of the data and special conditions exist for transfer to a third country. Specifically, the data importer guarantees an adequate level of data protection in accordance with standard EU clauses for the transfer of personal data to data processors in third countries.
F. Data subject rights
Unless otherwise indicated, E.ON Group Innovation GmbH is responsible for processing your data. You may request information from us at any time regarding the data stored about you and you may request the correction of this data in the event it contains errors.
In addition, you may also request restrictions be placed on processing, the portability of the data you provided us in a machine-readable format or the deletion of your data – provided it is no longer needed. Moreover, you have the right to object to the use of your data on the basis of public or legitimate interests at any time.
To do so, please contact:
E.ON Group Innovation GmbH, Data Protection, Brüsseler Platz 1, D-45131 Essen
Email: evailable@eon.com
It is imperative that we retain the data collected in our log files in order to ensure the functioning of the website. Therefore, there is no right to object to the processing of this information. For the cookies that we place with your consent, we have specified the technical option in which you can revoke your consent. This has been termed as Opt Out.
If we process your data on the basis of your consent, you may withdraw this consent with future effect at any time. Upon receipt of your withdrawal of consent, we cease processing your data for the purpose for which consent was granted.
Please direct your withdrawal of consent or revocation of your consent to the commercial use of your data to:
E.ON Group Innovation GmbH, Data Protection, Brüsseler Platz 1, D-45131 Essen
Email: evailable@eon.com
In addition, you can direct a complaint at any time to a regulatory authority. For us, the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, PO Box 20 04 44, 40102 Düsseldorf, Germany, Phone: +49 (0)2 11 / 384 24-0, is responsible. Alternatively, you may also approach the regulatory authority with jurisdiction at your location.